Make sure to lock and patch your email server. Also, do not give your root passwords to anyone, including a tech support person. Lock domain access to all of your sites. Analise your contact forms for vulnerabilities. But, I am sure you've already done all of that....right?